32 matches found
UBUNTU-CVE-2025-27144
Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption JWE, JSON Web Signature JWS, and JSON Web Token JWT standards. In versions on the 4.x branch prior to version 4.0.5, when parsing compact JWS or JWE...
FormaLMS 跨站脚本漏洞
FormaLMS is an open source learning management system. It is used to build around the specific needs of corporate training. A cross-site scripting vulnerability exists in FormaLMS versions prior to 4.0.5, which stems from the application's lack of effective filtering and escaping of user-supplied...
CVE-2022-4051
creationtimestamp| type| source ---|---|--- 2022-11-17 20:17:48+00:00| seen| https://t.me/cibsecurity/53071...
Docebo Community Edition SQL注入漏洞
Docebo Community Edition is a learning suite from Docebo Canada. A SQL injection vulnerability exists in Docebo Community Edition version v4.0.5 and prior versions, which stems from the inclusion of a SQL injection vulnerability...
Mattermost Server does not neutralize HTML content in an Email template field
An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5. E-mail templates can have a field in which HTML content is not neutralized...
Mattermost Server Cross-Site Scripting Vulnerability (CNVD-2020-48243)
Mattermost Server is the United States Mattermost company's set of open source messaging platform. A cross-site scripting vulnerability exists in Mattermost Server versions prior to 4.2.0, prior to 4.1.1, and prior to 4.0.5. The vulnerability stems from a lack of proper validation of client data ...
Mattermost Server Input Validation Error Vulnerability (CNVD-2020-48241)
Mattermost Server is the United States Mattermost company's set of open source messaging platform. A security vulnerability exists in Mattermost Server versions prior to 4.2.0, 4.1.1, and 4.0.5. An attacker could exploit the vulnerability to conduct a phishing attack...
CVE-2018-7956
Huawei VIP App is a mobile app for Malaysia customers that purchased P20 Series, Nova 3/3i and Mate 20. There is a vulnerability in versions before 4.0.5 that attackers can conduct bruteforce to the VIP App Web Services to get user information...
Netsweeper Authentication Bypass Vulnerability (CNVD-2017-30727)
Netsweeper is a Web content filtering solution from Netsweeper Canada. A security vulnerability exists in versions of Netsweeper prior to 4.0.5. A remote attacker can exploit this vulnerability by sending a request to the webadmin/nslam/index.php file to bypass authentication and create arbitrary...
Subrion CMS Cross-Site Request Forgery Vulnerability (CNVD-2017-04651)
Subrion CMS is a PHP-based content management system CMS developed by the Subrion team. The system can be integrated into a website and supports a wide range of extensions plug-ins and more. A cross-site request forgery vulnerability exists in admin/blog/add/URI in Subrion CMS version 4.0.5.10. A...
Subrion CMS Cross-Site Request Forgery Vulnerability (CNVD-2017-04653)
Subrion CMS is a PHP-based content management system CMS developed by the Subrion team. The system can be integrated into a website and supports a wide range of extensions plug-ins and more. A cross-site request forgery vulnerability exists in admin/blocks/add/URI in Subrion CMS version 4.0.5. An...